Current Events Malware

A Twitter user blogged a recent event in Pakistan. In his Twitter handle, he had a link to his blog. Apparently, his blog was compromised and had a malware link inserted. I actually went there before this report came out and did not get a peep from:

Firefox 3.6.17 w/No Script and Request Policy
Running as RunSafer with OA Free
Prevx SOL Free

I just went back and couldn't find that code in the source.

Scanned with Prevx and current MBAM and SAS...clean.

I don't know but here is the report:

*

NN

 

as with any major event malware pushers are ready to take advantage. Be vigilant out there

 

Try scanning with Hitman Pro and Avira Rescue CD. If nothing detects it, you'll have to restore a disk image or reformat.

 

Or I didn't get infected, or it was pulled out before I got there. I went back to the page on purpose and didn't see the code in the source like it was reported on the WebSense blog post.

P

Edit: Forgot about HitmanPro, thanks. Clean there too. No outgoing connections, nothing anywhere. It either wasn't there or it didn't get in. You would know when you got the pop up for the ScareWare.